Granada Virus

 Virus Name:  Granada 
 V Status:    Rare 
 Discovered:  July, 1993 
 Symptoms:    .COM file growth; TSR; beeping & scrolling display of 
              characters from memory 
 Origin:      The Netherlands 
 Eff Length:  2,765 Bytes 
 Type Code:   PRsC - Parasitic Resident .COM Infector 
 Detection Method:  ViruScan, IBMAV, F-Prot, Sweep, AVTK, NAV, 
                    NAVDX, VAlert, PCScan, 
                    NShld, NProt, Sweep/N, AVTK/N, IBMAV/N, NAV/N 
 Removal Instructions:  Delete infected files 
 General Comments: 
       The Granada virus was received in July, 1993.  Its origin or point 
       of isolation is unknown.  Granada is a memory resident infector of 
       .COM programs, but not COMMAND.COM. 
       When the first Granada infected program is executed, this virus will 
       install itself memory resident as a low system memory TSR of 3,072 
       bytes, hooking interrupts 08 and 21. 
       Once the Granada virus is memory resident, it will infect .COM 
       programs, other than COMMAND.COM, when they are executed.  Infected 
       programs will have a file length increase of 2,765 bytes with the 
       virus being located at the beginning of the file.  The program's date 
       and time in the DOS disk directory will not be altered.  One text 
       string is encrypted within the viral code: 
       It is unknown what Granada does besides replicate, though on some 
       systems, executing an infected program will result in beeping and 
       a scrolling display of characters from the viral code on the 
       system monitor. 

Show viruses from discovered during that infect .

Main Page